This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200187.roa
File:                     AS200187.roa (raw, json)
Hash identifier:          EAjZOner3ZomVyPWisX9Z4rx258o9jkeX+FJ5okHR+Y=
Subject key identifier:   E3:B9:AA:4B:9C:AE:FA:70:93:BF:97:13:32:9C:2A:6C:F3:99:CA:78
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       7163B056FDA18D965CB0F6429FB45881021A1689
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200187.roa
Signing time:             Wed 26 Nov 2025 14:51:29 +0000
ROA not before:           Wed 26 Nov 2025 14:46:29 +0000
ROA not after:            Wed 25 Nov 2026 14:51:29 +0000
asID:                     200187
IP address blocks:        82.26.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:63:b0:56:fd:a1:8d:96:5c:b0:f6:42:9f:b4:58:81:02:1a:16:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Nov 26 14:46:29 2025 GMT
            Not After : Nov 25 14:51:29 2026 GMT
        Subject: CN=E3B9AA4B9CAEFA7093BF9713329C2A6CF399CA78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:60:d5:0a:d1:2f:87:53:1d:bc:33:a3:c1:e1:
                    f5:37:d1:5f:55:33:f8:83:13:ad:04:6f:f6:23:20:
                    a6:37:27:d4:d8:70:37:5a:bb:e3:33:d4:4e:3e:8b:
                    dd:ab:5e:61:d3:9a:e9:88:b5:3d:c4:73:1c:a7:b2:
                    2d:87:e1:0f:47:a4:72:50:45:4a:af:c5:65:9c:52:
                    26:94:cf:23:a2:90:23:5c:0d:d2:7f:0a:c0:0f:a5:
                    7b:5f:7f:b0:f8:2f:e1:99:9d:fa:0e:ec:27:80:28:
                    9d:37:df:6f:e2:6b:6d:b0:ee:f4:ed:3e:d2:32:b6:
                    57:ac:ce:72:a4:38:85:79:0b:95:ce:ab:f1:e9:fd:
                    79:e4:1c:98:f0:6d:7c:f9:3b:49:87:01:26:c6:51:
                    28:69:f9:9c:12:ca:a1:d9:9b:e8:f5:19:d1:4c:67:
                    43:27:b2:cd:dd:65:63:00:2c:cd:a7:1b:14:7f:11:
                    d4:a8:c8:da:58:89:90:60:a0:4c:6e:cf:80:03:8c:
                    5d:8e:cd:88:98:14:6e:24:0c:a3:fc:cc:9c:43:c0:
                    17:00:28:7e:6b:82:0e:90:ac:d3:aa:13:6b:c9:57:
                    fe:ce:5d:92:07:ee:dd:94:d1:00:42:73:ff:dc:01:
                    5f:85:46:e7:ef:03:89:1c:0e:ec:d5:bc:df:85:a7:
                    36:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B9:AA:4B:9C:AE:FA:70:93:BF:97:13:32:9C:2A:6C:F3:99:CA:78
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200187.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.26.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:02:97:e4:aa:a5:61:80:95:0d:45:55:92:9b:d3:f5:07:00:
         26:a9:ca:fe:6e:54:02:2c:9f:cf:97:18:b9:cb:0e:f1:c3:a4:
         a1:55:2a:37:4e:d5:66:c6:0a:1b:ec:6b:7a:93:fb:c3:9f:24:
         8e:8e:69:15:58:4a:53:d2:04:a3:6d:ac:aa:a1:3a:b0:e9:20:
         42:aa:c3:53:9c:5f:75:1d:1c:ae:35:83:57:e6:2b:d8:ac:ce:
         c7:9a:93:cc:81:2f:7d:2d:b1:df:15:3f:b6:6a:b1:5c:33:23:
         1c:de:e2:21:d3:d6:80:d8:a4:e2:01:89:9f:5a:50:41:58:b4:
         8a:3c:2b:69:b5:b6:1c:98:3a:31:2f:48:4b:fe:56:3c:a1:47:
         5a:35:b6:5d:c6:37:b5:fa:e8:9c:c3:ee:44:c2:41:ef:47:76:
         42:33:52:73:90:9a:5d:a3:b1:a3:98:0a:11:c1:31:95:8b:a2:
         49:bc:ec:30:22:f2:33:e8:f6:21:14:d4:81:d7:80:ea:6e:b1:
         52:d1:bd:d0:0c:12:18:a5:62:bc:b8:80:2e:39:d2:5d:68:0b:
         2c:9b:14:56:f3:7c:17:39:92:2d:45:6f:4a:90:9a:dc:fb:88:
         09:86:aa:a0:85:c8:eb:ff:22:ce:55:71:b0:f5:93:fa:72:12:
         76:7e:ff:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 06:01:44 2025 by rpki-client